.Net core SDK Clean Removal

Question

We have identified multiple vulnerabilities every month due to the .Net core (like 6.0, 7.0, and 8.0). This is because the latest update removes the older version, but doesn't delete the older files. This became very challenging to remove these files from 10k machines. Please assist with the solution how to manage the removal for .NET core. An example is shown below.

Path              : C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\7.0.11
  Installed version : 7.0.11
  Fixed version     : 7.0.12



  Path              : C:\Program Files (x86)\dotnet\shared\Microsoft.AspNetCore.App\6.0.22
  Installed version : 6.0.22
  Fixed version     : 6.0.23



  Path              : C:\Program Files (x86)\dotnet\shared\Microsoft.AspNetCore.App\7.0.11
  Installed version : 7.0.11
  Fixed version     : 7.0.12

Answer 1

patch installs are just side by side. if you google, you will see you are not alone and there is no great solution.

see uninstall tool (latest options)

https://learn.microsoft.com/en-us/dotnet/core/additional-tools/uninstall-tool?tabs=macos

you will need to install the tool on all your machines, then run after a patch.

dotnet-core-uninstall --all-but-latest